"Bob Puff@NLE" wrote:
> 
> On a somewhat related topic, consider this scenerio:
> 
> I want a linux box to function sort of like a switch, passing through internet 
>traffic, but isolating each network device from another.
> 
> Example:
> eth0 = connection to a Masqing box (192.168.1.x network)
> eth1 = office 1  (192.168.1.41-50)
> eth2 = office 2  (192.168.1.51-60)
> eth3 = office 3  (192.168.1.61-70)
> 
> In this box, I want no masquerading to take place.. I want a machine connected to 
>eth1 with an IP of 192.168.1.42 routed right out eth0 as the same IP.  Basically just 
>like I had a dumb hub.  The reason for the need for some intelligience here is that I 
>don't want Win95 machines in office 1 seeing machines in office 2 using their netbios 
>/ whatever protocol.
> 
> The reverse obviously has to work: if a packet comes into eth0 for 192.168.1.65, it 
>should go right out eth3 with that same IP.  This means that eth0 will be responding 
>to several IP numbers, not just its own.
> 
> If it makes it any easier, I can change eth0's network numbers to be on another 
>network (like 10.0.0.x), but I still need the 1:1 mapping.
> 
> How/where in IPCHAINS???
> 
> Bob

Would it make think somewhat easier if each office had it's own
network segment?  
The masq'ing box on 192.168.4.x network, and:

                       NIC on           'linux switch''s
descrip   segment      'linux switch'"  IP on each segment
--------  -----------  ---------------  ------------------
office 1  192.168.1.x  eth1             192.168.1.1
office 2  192.168.2.x  eth2             192.168.2.1
office 3  192.168.3.x  eth3             192.168.3.1
masq box  192.168.4.x  eth0             192.168.4.1

If each client had a 255.255.255.0 netmask, then your "linux 
switch" could have an ethX on each of 192.168.[123] and 192.168.4.
Also, the "linux switch" (as 192.168.[123].1 on each relevant
ethX NIC) would be the default gw of each client PC.

Would that make the IPchains solution more tractable, since
all is not on 1 network segment?

Or am I just a dumb sh*t who should keep his hands off the
keyboard?

Ron
-- 
+----------------------------------------------------------+
| Ron Johnson, Jr.        Home: [EMAIL PROTECTED]       |
| Jefferson, LA  USA      WWW : [EMAIL PROTECTED]     |
|                                                          |
| Most overused words: feel, cool/kewl, fun, myBlah.com    |
| Most underused word: think                               |
+----------------------------------------------------------+

Reply via email to